We can find network interfaces which are available to the TShark with command: tshark -D After reconnection, you can check TShark version: tshark -versionĮxecute tshark command without any arguments to start capturing packets on default network interface: tshark In order to make changes to take effect, logout and login to your machine. Run the following command to add current user to a wireshark group: sudo usermod -a -G wireshark $USER It will add wireshark group and anyone who is a member of this group will be able to capture packets without being root user. Install TShark: sudo apt install -y tsharkĭuring installation you will be asked if you want to allow non-root users to able to capture packets. Install TSharkĪdd the Wireshark and TShark repository: sudo add-apt-repository -y ppa:wireshark-dev/stable This tutorial demonstrates how to install TShark on Ubuntu 20.04. TShark is a command line version of Wireshark that can be used when graphical user interface isn't available.

This tool enables to capture packets from a network and print them to the standard output. TShark is a command line tool for analyzing network traffic.

Ubuntu install wireshark 20.04